350-701 Content Security Practice Question
An organization is deploying Cisco WSA to enforce acceptable use policies. The administrator wants to block access to social media and streaming video, while also decrypting HTTPS traffic for these categories. Which THREE configuration steps are required?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Install a trusted root CA certificate on all client devices
To block and decrypt HTTPS traffic for specific categories, you need URL filtering, decryption policy, and identity-based policies for granular control.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Install a trusted root CA certificate on all client devices
Why this is correct
Clients must trust the WSA's CA to avoid certificate warnings.
- ✓
Enable SSL decryption for those categories
Why this is correct
SSL decryption is needed to inspect HTTPS traffic in those categories.
- ✓
Configure URL filtering to block the 'Social Networking' and 'Streaming Media' categories
Why this is correct
URL filtering blocks the categories.
- ✗
Enable AMP file scanning
Why it's wrong here
AMP scanning is for malware detection, not for blocking categories.
- ✗
Configure WCCP on the router
Why it's wrong here
WCCP is for transparent proxy deployment, not for blocking or decryption.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.